Product of Microsoft
Defender
As of , 5 Microsoft Defender vulnerabilities are on CISA's list of exploited vulnerabilities, 2 of them used in ransomware campaigns; 3 were added in 2026. Patch first: CVE-2026-33825.
Patch first
| # | Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|---|
| 1 | CVE-2026-33825Insufficient Granularity of Access Control | Microsoft Defender | Patch nowRansomware use, listed within a year | 0.00 | ||
| 2 | CVE-2022-44698SmartScreen Security Feature Bypass | Microsoft Defender | Patch this weekRansomware use; EPSS 0.76 | 0.76 | ||
| 3 | CVE-2021-1647Remote Code Execution | Microsoft Defender | Patch soon | 0.39 | ||
| 4 | CVE-2026-45498Denial of Service | Microsoft Defender | Patch soon | 0.01 | ||
| 5 | CVE-2026-41091Link Following | Microsoft Defender | Patch soon | 0.00 |
Added each year
Show the numbers
| Period | entries added |
|---|---|
| 2021 | 1 |
| 2022 | 1 |
| 2023 | none |
| 2024 | none |
| 2025 | none |
| 2026 | 3 |